Experimental News Clipping Site

Tag: zero-day

  • The Register: Citrix bleeds again: This time a zero-day exploited – patch now

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/06/25/citrix_netscaler_critical_bug_exploited/ Source: The Register Title: Citrix bleeds again: This time a zero-day exploited – patch now Feedly Summary: Two emergency patches issued in two weeks Hot on the heels of patching a critical bug in Citrix-owned Netscaler ADC and NetScaler Gateway that one security researcher dubbed “CitrixBleed 2," the embattled networking device vendor…

  • The Register: Apple fixes zero-click exploit underpinning Paragon spyware attacks

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/06/13/apple_fixes_zeroclick_exploit_underpinning/ Source: The Register Title: Apple fixes zero-click exploit underpinning Paragon spyware attacks Feedly Summary: Zero-day potentially tied to around 100 suspected infections in 2025 and a spyware scandal on the continent Apple has updated its iOS/iPadOS 18.3.1 documentation, confirming it introduced fixes for the zero-click vulnerability used to infect journalists with Paragon’s…

  • Cisco Talos Blog: catdoc zero-day, NVIDIA, High-Logic FontCreator and Parallel vulnerabilities

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/catdoc-zero-day-nvidia-high-logic-fontcreator-and-parallel-vulnerabilities/ Source: Cisco Talos Blog Title: catdoc zero-day, NVIDIA, High-Logic FontCreator and Parallel vulnerabilities Feedly Summary: Cisco Talos’ Vulnerability Discovery & Research team recently disclosed three zero-day vulnerabilities in catdoc, as well as vulnerabilities in Parallel, NVIDIA and High-Logic FontCreator 15. AI Summary and Description: Yes Summary: The disclosed vulnerabilities highlight significant security…

  • Cisco Talos Blog: Everyone’s on the cyber target list

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/everyones-on-the-cyber-target-list/ Source: Cisco Talos Blog Title: Everyone’s on the cyber target list Feedly Summary: In this week’s newsletter, Martin emphasizes that awareness, basic cyber hygiene and preparation are essential for everyone, and highlights Talos’ discovery of the new PathWiper malware. AI Summary and Description: Yes **Summary:** The text summarizes insights on personal cybersecurity…

  • The Register: CISA says SaaS providers in firing line after Commvault zero-day Azure attack

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/05/23/cisa_commvault_zero_day/ Source: The Register Title: CISA says SaaS providers in firing line after Commvault zero-day Azure attack Feedly Summary: Cyberbaddies are coming for your M365 creds, US infosec agency warns The Cybersecurity and Infrastructure Security Agency (CISA) is warning that SaaS companies are under fire from criminals on the prowl for cloud apps…

  • Cisco Talos Blog: UAT-6382 exploits Cityworks zero-day vulnerability to deliver malware

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/uat-6382-exploits-cityworks-vulnerability/ Source: Cisco Talos Blog Title: UAT-6382 exploits Cityworks zero-day vulnerability to deliver malware Feedly Summary: Talos has observed exploitation of CVE-2025-0994 in the wild by UAT-6382, a Chinese-speaking threat actor, who then deployed malware payloads via TetraLoader. AI Summary and Description: Yes **Summary:** The text describes the exploitation of a significant remote-code-execution…

  • The Register: Ivanti patches two zero-days under active attack as intel agency warns customers

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/05/14/ivanti_patches_two_zerodays_and/ Source: The Register Title: Ivanti patches two zero-days under active attack as intel agency warns customers Feedly Summary: Vendor says vulns are linked with 2 mystery open source libraries integrated into EPMM product Australia’s intelligence agency is warning organizations about several new Ivanti zero-days chained for remote code execution (RCE) attacks. The…